U.S. Patent Application Serial No. 10/780,144 
Reply To Office Action Dated January 22, 2010 
Office Action Mailed November 10, 2009 

REMARKS/ARGUMENTS 

This Amendment and the following remarks are intended to fully respond to the Office 
Action dated November 10, 2009, hereinafter "Office Action." In that Office Action, claims 1- 
26, 28-29, 31, 33, 36-56, and 58-66 were examined and all claims were rejected. Specifically, 
claims 1-4, 9, 10, 16, 17, 20, 36-41, 44, 45, 51, 52, 55, 56, 58-63, 65, and 66 were rejected under 
35 U.S.C. §103(a), as being unpatentable over Wallent et al. US 6,366,912 (hereinafter Wallent) 
in view of Touboul US 6,154,844 (hereinafter Touboul '844). Claims 5 and 6 were rejected 
under 35 U.S.C. §103(a), as being unpatentable over Touboul '844 in view of Donohue USPN 
6,202,207 (hereinafter Donohue). Claims 7 and 8 were rejected under 35 U.S.C. §103(a), as 
being unpatentable over Wallent in view of Touboul '844, and fijrther in view of Pennell et al. 
US Patent Application Publication No. 20030098883 (hereinafter Pennell). Claims 11-15, 18, 
19, 21-26, 28, 29 31, 33, 42, 43, 46-50, 53, 54, and 64 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Wallent in view of Touboul '844 and Pennell. 

Reconsideration of these rejections, as they might apply to the original and amended 
claims in view of these remarks, is respectfiiUy requested. In this Amendment, claims 1, 21, 36, 
and 56 have been amended, and no claims have been canceled or added. Therefore, claims 1-26, 
28-29, 31, 33, 36-56, and 58-66 remain present for examination. 

Applicants submit that claim amendments are supported throughout the specification, and 
in the claims as originally filed, and do not introduce new matter. 

Claims Rejected Under 35 USC § 103(a) 

All the claims were rejected under 35 USC § 103(a) as being anticipated by Wallent in 
combination with other references. Applicant respectfijUy traverses the § 103(a) rejections of the 
claims because the Office Action failed to state a prima facie case of obviousness. Specifically, 
the references fail to teach all of the claimed elements. To establish a prima facie case of 
obviousness under 35 U.S.C. § 103(a), the references must teach all of the claimed elements to 
one of ordinary skill in the art at the time the invention was made. M.P.E.P §§ 2142, 2143.03. 
Further, under KSR Int'l Co. v. Teleflex, Inc., there "must be some articulated reasoning with 
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some rational underpinning to support the legal conclusion of obviousness." 127 S. Ct. 1727, 

1741 (2007). 

Independent claims 1, 36. and 56 

Specifically, claims 1-4, 9, 10, 16, 17, 20, 36-41, 44, 45, 51, 52, 55, 56, 58-63, 65, and 66 
were rejected under 35 U.S.C. § 103(a), as being unpatentable over Wallent in view of Touboul. 
Applicant's traverse the § 103 rejection because the Office Action has failed to show that the 
cited references teach all the limitations of independent claims 1, 7, 14, 19, 26, and 32. 

Wallent relates to "a computer based system and method for providing security when 
receiving digital data at a client computer from one or more web sites." (Wallent, Abstract). 
Wallent establishes multiple security zones, each security zone corresponding to a set of 
websites. (Wallent, col. 2, 11. 55-59). When the web browser in Wallent receives a web page 
that is requesting performance of an operation, the web browser determines whether the 
operation is a protected operation. (Wallent, col. 11, 11. 35-37). According to Wallent, some 
operations are protected and some operations are not. For example, dragging and dropping or 
copying and pasting files is a protected operation. (Wallent, col. 9, 11. 50-53). Downloading 
trusted software, on the other hand, is not considered a protected operation (Wallent, col. 10, 11. 
16-17). Furthermore, the number of protected operations is estabhshed for a given web browser. 
(Wallent, col. 8, 11. 41-51). A user can view the list of protected operations and set security 
settings for each protected operation. See id. If the operation is a protected operation, the web 
browser determines the security setting corresponding to the received web site's security zone. 
(Wallent, col. 10, 11. 16-17). 

Touboul relates to "a system [that] comprises an inspector and a protection engine." 
(Touboul, Abstract). The system in Toubel discloses "downloadable security profiles." 
(Touboul, col. 5, 11. 28-32). The downloadable security profile "preferably includes a list of all 
potentially hostile or suspicious computer operations that may be attempted by the 
Downloadable, and may also include the respective arguments of these operations." (Touboul, 
col. 4, 11. 4-7). The downloadable security profile is then compared to the local security policy. 
(Touboul, col. 5, 11. 28-32). 
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Claim 1 

Claim 1 recites, inter alia: 

detecting, by the browser at the client device, an object associated with the web 
page, wherein the object is an activatable object; 

suppressing the object when the trust level accorded to the object does not reach a 
threshold trust level based on variable combinations of the content, source, and 
action of the object. 

Wallent fails to teach or suggest at least "detecting, by the browser at the client device, 
an object associated with the web, wherein the object is an activatable object" as recited in 
independent claim 1 . As discussed above, Wallent provides security when a protected 
operation is requested. Wallent also demonstrates that some operations are protected and some 
operations are not. The present application, on the other hand, relates to "an activatable object 
detecting, by the browser at the cUent device, an object associated with the web, wherein the 
object is an activatable object (emphasis added). 

Wallent also fails to teach or suggest at least "suppressing the object when the trust level 
accorded to the object does not reach a threshold trust level based on variable combinations of 
the content, source, and action of the object." The previous Office Action admitted that Wallent 
does not disclose according a "trust level to the object, wherein the according comprises 
evaluating a content source, or action of the object." (See Office Action, p. 3). The Office 
Action relied on Touboul for disclosure of this element. Specifically, the Office Action equated 
the downloadable security policy with a trust level associated with an object. See id. The Office 
Action further argued that a downloadable is suppressed based on rules in the downloadable 
security policy. See id. Touboul, however, does not engage in "suppressing the object when the 
trust level accorded to the object does not reach a threshold trust level based on variable 
combinations of the content, source, and action of the object." For at least the above reasons, 
Wallent fails to teach or suggest all the claimed embodiments of the present application and 
Touboul fails to compensate for Wallent's deficiencies. AppUcant respectfully requests a 
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withdrawal of the rejection for independent claim 1, and its dependent claims 2-20, and an 
issuance of a notice of allowance at Examiner's earliest convenience. 



Claim 36 

Claim 36 recites, inter alia: 

a detector to detect an object associated with a web page as a part of displaying 
the web page by a browser at a chent device, wherein the object is an activatable 
object; 

a blocker to block an action associated with the object when the trust level 
accorded to the object does not reach a threshold trust level based on variable 
combinations of the content, source, and action of the object; 

The recited elements of claim 36 are similar to the recited elements of claim 1 . For at 
least the same reasons as claim 1, Wallent fails to teach or suggest all the claimed limitations of 
independent claim 36 and Touboul fails to compensate for Wallent' s deficiencies. Applicant 
respectfully requests a withdrawal of the rejection for independent claim 36, and its dependent 
claims 37-55, and an issuance of a notice of allowance at Examiner's earliest convenience. 

Claim 56 

Claim 56 recites, inter alia: 

means for detecting an object associated with the web page by the browser at the 
client device, wherein the object is an activatable object; 

means for blocking an action associated with the object when the trust level 
accorded to the object does not reach a threshold trust level based on variable 
combinations of the content, source, and action of the object; 

The recited elements of claim 56 are similar to the recited elements of claims 1 and 36. 
For at least the same reasons as claims 1 and 36, Wallent fails to teach or suggest all the claimed 
limitations of independent claim 56 and Touboul fails to compensate for Wallent' s deficiencies. 



17 



U.S. Patent Application Serial No. 10/780,144 
Reply To Office Action Dated January 22, 2010 
Office Action Mailed November 10, 2009 

Applicant respectfully requests a withdrawal of the rejection for independent claim 56, and its 
dependent claims 58-66, and an issuance of a notice of allowance at Examiner's earliest 
convenience. 

Independent claim 21 

Specifically, claims Claims 1 1-15, 18, 19, 21-26, 28, 29 31, 33, 42, 43, 46-50, 53, 54, and 
64 are rejected under 35 U.S.C. 103(a) as being unpatentable over Wallent in view of Touboul 

'844 and Pennell. AppUcant's traverse the § 103 rejection because the Office Action has failed to 
show that the cited references teach all the limitations of independent claims 1, 7, 14, 19, 26, and 
32. 

Claim 21 

Claim 21 recites, inter alia: 

determining, by a browser at the client device, a trust level security setting for an 
object associated with a web page to be displayed by the browser at the client 
device, wherein the object is an activatable object, and wherein the trust level 
security setting for the object is determined as part of displaying the web page by 
evaluating criteria based on at least one of a content, a source and an action of the 
object; 

suppressing an action associated with the object when the trust level security 
setting for the object does not reach a threshold trust level security setting based 
on variable combinations of the content, source, and action of the object 

The recited elements of claim 21 are similar to the recited elements of claim 1. For at 
least the same reasons as claim 1, Wallent fails to teach or suggest all the claimed limitations of 
independent claim 21 and Touboul fails to compensate for Wallent's deficiencies. Pennell does 
not compensate for the deficiencies of Wallent and Touboul. The identified portions of Pennell 
relate to blocking bad windows and displaying good windows. (Pennell, para. [0043]). When a 
bad window is identified, Pennell blocks the bad window displaying a prompt to indicate 
suppression of the window. (Pennell, para. [0081]). The identified portions of Pennell fail to 
teach or suggest the recited embodiments of the present application. Applicant respectfully 
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requests a withdrawal of the rejection for independent claim 21, and its dependent claims 22-26, 
28-29, 31, and 33, and an issuance of a notice of allowance at Examiner's eariiest convenience. 

De pendent claims 5-6 

Dependent claims 5-6 were rejected under 35 U.S.C. §103(a), as being unpatentable over 
Touboul '844 in view of Donohue USPN 6,202,207 (hereinafter Donohue). Dependent claims 5- 
6 depend from independent claim 1 . Due to the nature of their dependencies, claims 5-6 are 
allowable over the cited references for at least the same reasons as claim 1 . 

CONCLUSION 

This Amendment fully responds to the Office Action mailed on November 10, 2009. 
Still, that Office Action may contain arguments and rejections that are not directly addressed by 
this Amendment due to the fact that they are rendered moot in light of the preceding arguments 
in favor of patentability. Hence, failure of this Amendment to directly address an argument 
raised in the Office Action should not be taken as an indication that the Applicants believe the 
argument has merit. Furthermore, the claims of the present application may include other 
elements, not discussed in this Amendment, which are not shown, taught, or otherwise suggested 
by the references of record. Accordingly, the preceding arguments in favor of patentabiUty are 
advanced without prejudice to other bases of patentability. 

Please charge deposit account number 13-2725 for a one month extension. If any further 
deficiencies are due. Commissioner is hereby authorized to charge any deficiencies or credit any 
overpayment with respect to this patent application to deposit account number 13-2725. 

In light of the above remarks and amendments, it is believed that the application is now 
in condition for allowance and such action is respectfully requested. Should any additional 
issues need to be resolved, the Examiner is requested to telephone the undersigned to attempt to 
resolve those issues. 

Respectfully submitted. 
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MERCHANT & GOULD P.C. 
P.O. Box 2903 

Minneapolis, Minnesota 55402-0903 
(303) 357-16^ 




David St. JohfHCarkin, Esq., Reg. No. 56,924 
Attorney for Applicant 



Date: January 22, 2010 
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